Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
File:                     A3048576EC3911EEA6178B13C4F9AE02.roa (raw, json)
Hash identifier:          kortXzDV3z8yqdb7hUTvSq2L5JWGq27VKKVJ2FtpSxc=
Subject key identifier:   EA:98:3B:29:90:F0:23:E1:E8:F8:56:7B:73:90:C9:27:9E:25:2F:DE
Certificate issuer:       /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial:       4D
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
Signing time:             Wed 15 May 2024 08:43:08 +0000
ROA not before:           Wed 15 May 2024 08:43:08 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138995
IP address blocks:        14.192.4.0/22 maxlen: 23
                          43.224.224.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
        Validity
            Not Before: May 15 08:43:08 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6644759c-67bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:64:7b:0c:44:f0:08:3f:f7:91:ee:a0:4a:98:
                    58:72:49:57:3b:66:a2:03:53:7e:28:63:77:3e:ca:
                    01:33:0a:dc:9b:76:14:77:c0:17:76:64:e4:c4:c4:
                    53:3c:15:a4:2b:43:49:d1:b8:bb:08:ab:4e:7a:bf:
                    74:81:a7:4d:68:4e:95:5f:ca:64:df:7e:4a:08:5e:
                    5a:92:d0:96:07:ef:81:08:c7:68:93:6b:11:6b:d4:
                    69:88:96:b5:d2:6e:12:01:e9:48:b6:de:f6:3d:88:
                    2a:14:62:fe:d6:dc:30:39:d1:88:21:74:9c:d8:d8:
                    6b:f8:76:22:22:ec:27:7d:5b:07:95:7c:55:a5:95:
                    69:d0:8a:07:54:d8:4b:88:2d:40:4a:42:76:92:d8:
                    8c:b0:b4:04:1f:a3:73:2d:96:be:38:14:ea:d8:9b:
                    74:23:10:04:6f:95:7f:52:cc:3d:f8:16:13:b3:c1:
                    86:14:dd:60:58:65:5e:a5:b2:b8:24:fa:cc:d8:a7:
                    e5:24:d5:1f:8b:61:75:33:97:1a:4b:fc:48:91:27:
                    f1:88:64:7b:b9:ac:56:e5:06:c2:f2:91:cc:cd:1e:
                    16:8c:52:5c:ee:83:90:d4:0b:85:76:c2:f2:3b:c7:
                    76:a7:c0:06:f9:73:91:43:9c:d7:2b:1c:8c:c1:fd:
                    ae:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:98:3B:29:90:F0:23:E1:E8:F8:56:7B:73:90:C9:27:9E:25:2F:DE
            X509v3 Authority Key Identifier:
                keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.4.0/22
                  43.224.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:50:ae:6c:21:b0:17:1e:8f:68:d5:e3:8a:a3:4b:54:51:81:
         48:61:23:cc:27:51:5b:00:8f:b9:11:f0:f1:0d:f3:7c:a7:82:
         7d:77:8f:d3:91:6b:57:b1:2e:da:ae:52:07:d2:15:2e:c9:84:
         b8:6a:fb:da:83:6d:97:01:54:e8:01:d1:3d:fd:71:c9:10:cc:
         5a:b1:17:e8:2c:d2:5f:25:36:a2:a0:94:eb:88:e5:39:ab:9d:
         f7:ab:32:c9:f8:5e:6a:9a:58:27:1f:f7:c9:c6:2a:b5:51:21:
         bc:90:70:72:4d:64:b4:e5:41:38:5c:d4:7d:0b:f3:bc:3c:72:
         26:9c:db:17:fe:af:07:6f:96:56:da:ae:e5:02:15:c8:d0:a6:
         ad:50:36:c1:ec:37:d4:7c:63:f8:cc:71:89:c6:fd:b2:5d:f1:
         fb:59:1e:30:e1:52:f0:ac:bf:f9:4c:f1:86:1e:27:3a:4f:fd:
         ab:f4:f6:3d:66:d2:69:c1:ec:2c:2c:e4:7e:23:76:a0:c0:fb:
         9f:9c:39:ee:27:7c:11:e9:09:b9:69:c1:ef:26:99:ac:53:c7:
         2d:4b:10:1d:ae:09:35:41:e6:a6:66:ba:43:91:01:b6:03:ee:
         1e:9c:24:61:ed:41:2b:d8:21:8e:43:92:0d:ba:db:6e:ee:1b:
         fa:ad:45:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:13 2024 by rpki-client on console-fra.rpki-client.org